vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

Oracle Linux 9 : kernel (ELSA-2026-87805)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87805 advisory. - xfs: bounds-check buffer log item's dirty bitmap Pavel Reichl RHEL-253366 CVE-2026-80536 - ovl: check access to copyfilerange source with src mounte...

Oracle Linux 8 : brotli (ELSA-2026-90501)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90501 advisory. 1.0.6-5 - Resolves: RHEL-290271 - CVE-2026-111497 brotli: Out-of-Bounds Write in Google Brotli Decoder Tenable has extracted the preceding description block...

Oracle Linux 10 : xdg-dbus-proxy (ELSA-2026-90523)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90523 advisory. 0.1.5-4.1 - Message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Resolves: RHEL-271542 Tenable has extracted the preceding descripti...

Oracle Linux 8 : kernel (ELSA-2026-89816)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89816 advisory. - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CKI Backport Bot RHEL-277607 CVE-2026-74515 - selinux: avoid sksocket dereference in...

Oracle Linux 8 : kernel (ELSA-2026-87375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87375 advisory. - vfio/pci: clear vdev-msiperm after freeing it on init failure Rodolfo Vick RHEL-270905 CVE-2026-89777 - ALSA: seq: close a re-opened queue timer in...

Oracle Linux 10 : firefox (ELSA-2026-89758)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89758 advisory. 153.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 8 : libreswan (ELSA-2026-90492)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90492 advisory. - Backport fixes for CVE-2026-94453, CVE-2026-77206 and CVE-2026-77207 RHEL-281879, RHEL-282682, RHEL-282477 - Backport fix for CVE-2026-14957...

Oracle Linux 8 : kernel (ELSA-2026-89083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89083 advisory. - selinux: avoid sksocket dereference in selinuxsctpbindconnect Ondrej Mosnacek RHEL-243220 CVE-2026-72242 - ipv4: validate checksumstart before...

Oracle Linux 10 : brotli (ELSA-2026-90449)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90449 advisory. 1.1.0-8.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 9 : podman (ELSA-2026-90362)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90362 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 9 : python3.9 (ELSA-2026-89742)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89742 advisory. - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio Resolves: RHEL-274143 ...

Oracle Linux 10 : brotli (ELSA-2026-500514)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500514 advisory. 1.1.0-8.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : nodejs:22 (ELSA-2026-500519)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500519 advisory. - Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : kernel (ELSA-2026-88477)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88477 advisory. - drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Anusha Srivatsa RHEL-278280 CVE-2026-97493 - drm/amdkfd: Add TLB flush after MES queue...

Oracle Linux 8 : brotli (ELSA-2026-500512)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500512 advisory. 1.0.6-4.0.1 - Fix CVE-2026-111497: reject invalid Brotli block switches Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 9 : brotli (ELSA-2026-500513)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500513 advisory. 1.0.9-10.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 10 : libreswan (ELSA-2026-89923)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89923 advisory. 5.3.3-1.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 5.3.3-1 - update to 5.3.3 to fix CVE-2026-94453, CVE-2026-77207, CVE-2026-7720...

Oracle Linux 10 : bind (ELSA-2026-90328)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90328 advisory. - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes...